Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
File:                     rARWSrE5dm8d7mSLNaChi702IQk.mft (raw, json)
Hash identifier:          38h+ybybBmUVjNzRowwyUrvxRjzTMLkvgkuXTGuan7E=
Subject key identifier:   C3:63:C6:3A:94:36:BC:B4:4C:83:C4:F7:E8:34:37:7F:A6:89:11:1C
Authority key identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09
Certificate issuer:       /CN=ac04564ab139766f1dee648b35a0a18bbd362109
Certificate serial:       01962F0658BE5B33380C90444E29AAF94739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: rARWSrE5dm8d7mSLNaChi702IQk.crl (hash: NUmP1G9RBn4gAYsIY3lnXoYVp6ixg4sNs6iRy7VISSw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:be:5b:33:38:0c:90:44:4e:29:aa:f9:47:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac04564ab139766f1dee648b35a0a18bbd362109
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=c363c63a9436bcb44c83c4f7e834377fa689111c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:d2:13:ec:8b:e7:60:29:da:27:75:ba:f4:
                    24:e4:1f:64:b9:4d:3c:c5:1f:7c:f9:6e:44:65:be:
                    27:61:07:c9:82:54:4c:71:b0:fb:cb:33:1d:e4:57:
                    1f:53:f2:ed:b7:22:ff:c2:70:ce:f0:3b:28:49:18:
                    47:71:4d:4b:01:b1:85:d7:36:af:e7:71:a1:c4:62:
                    cb:89:62:ec:77:f2:f9:8c:70:b9:f3:c5:26:5e:c7:
                    cb:fa:10:6e:62:f6:c9:03:3f:75:87:4b:e2:d9:39:
                    c7:0e:4b:18:50:e7:01:c5:66:f4:fc:2a:b7:ac:00:
                    95:12:f4:f1:aa:ca:78:8e:84:b8:18:1e:1a:99:fe:
                    fc:77:39:f4:4e:f8:2e:05:a3:9a:5d:da:49:f5:3b:
                    7e:cb:a8:0d:1d:b5:2d:fd:71:70:65:af:77:42:e6:
                    07:a2:14:f9:d9:ff:de:09:51:8f:77:58:f4:2f:68:
                    23:ba:fe:90:50:75:61:fe:0b:ba:ea:9f:26:11:97:
                    d5:41:61:34:ea:6a:8d:63:9e:53:4e:f8:64:03:48:
                    bc:50:e2:50:d1:12:cc:f1:c6:23:ce:a2:bd:90:36:
                    cd:26:14:1c:2d:24:3a:32:c8:f7:7c:f6:1e:df:b0:
                    04:8e:dd:99:3f:f4:43:5d:12:df:8a:c8:b9:12:9d:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:63:C6:3A:94:36:BC:B4:4C:83:C4:F7:E8:34:37:7F:A6:89:11:1C
            X509v3 Authority Key Identifier:
                keyid:AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:83:66:95:49:3f:26:8a:99:9f:97:a6:c2:02:6c:ec:4b:f9:
         0e:d2:d8:f5:1d:8c:72:b0:f5:85:ac:2c:b5:d2:03:7c:1e:3b:
         e8:34:4e:42:15:1a:7a:2b:ba:61:b7:55:e9:5f:f9:aa:ba:0b:
         62:9d:ec:58:02:8c:c5:72:c9:5a:ac:46:50:e2:84:e9:b0:68:
         35:a3:9d:36:d2:6e:4c:61:eb:a0:33:ff:32:5a:d9:eb:fc:c6:
         88:50:c7:70:a4:70:a8:b9:6e:b0:2a:c6:fa:b1:b7:c8:10:ba:
         e4:82:79:bb:02:20:f1:c7:ed:b5:e7:05:ea:ed:3d:06:3f:66:
         54:d2:b1:27:9d:ef:8e:ce:3f:5e:3c:7e:f3:ef:ff:cb:d3:49:
         2c:fe:f0:9d:ca:72:14:06:20:f6:1e:f9:78:22:11:7c:35:a4:
         dc:2d:42:75:58:fd:1e:28:31:41:98:0e:86:f9:80:98:e9:5f:
         a9:fe:16:0f:7c:00:20:b8:d3:ce:c5:23:9f:f1:d1:75:f6:32:
         f9:29:cf:ca:b8:9b:f0:aa:4c:68:07:54:9a:1a:e5:f6:07:a7:
         ed:f6:eb:8c:98:44:f7:71:25:5d:16:82:d1:36:5e:c7:54:3a:
         ac:91:80:97:3e:2e:3f:49:cd:6f:ca:28:0a:6b:c1:90:15:6e:
         91:44:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----